← Back to search

@nuzo/memory

GitHub Actions Scanned 14d ago

Unified Nuzo package for local memory, MCP server integration, and host lifecycle hooks.

npm
B
76.3 / 100

Versions

1.1.0latest
Jul 14, 2026
1.0.0
Jul 5, 2026
0.9.1
Jul 1, 2026
0.9.0
Jul 1, 2026
0.8.1
Jun 29, 2026
+ show 7 moreshow less
0.8.0
Jun 29, 2026
0.7.0
Jun 29, 2026
0.6.0
Jun 29, 2026
0.5.0
Jun 28, 2026
0.4.0
Jun 28, 2026
0.3.1
Jun 28, 2026
0.3.0
Jun 28, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 19

memory.remember
annotations: none low

Store a local Nuzo memory only when the user explicitly requested this exact write. For inferred capture, call memory.suggest_capture, display its returned draft, obtain the user's decision, then call memory.confirm_capture.

kind enum tags array source string content string confidence number
memory.recall
annotations: none low

Recall relevant local Nuzo memories.

limit number query string include_global boolean retrieval_mode enum semantic_fallback enum
memory.recall_hook
annotations: none low

Prototype read-only recall entrypoint for host lifecycle hooks. It never captures or creates memories.

limit number task_context string
memory.suggest_capture
annotations: none low

Validate an inferred capture draft without writing. Display the returned draft to the user; only after their explicit decision may the host call memory.confirm_capture with the final approved fields.

kind enum tags array reason string source string content string confidence number relationship_mode enum
memory.confirm_capture
annotations: none low

Apply the user's explicit decision after the host displayed a memory.suggest_capture draft. confirm=true is the host's attestation of that interaction; Nuzo does not persist or cryptographically bind drafts.

kind enum tags array actor string reason string source string confirm boolean content string decision enum confidence number expected_revision number
memory.list
annotations: none low

List local Nuzo memories.

tags array limit number needs_review boolean include_archived boolean
memory.show
annotations: none low

Inspect one local Nuzo memory with relations and recent audit events.

history_limit number
memory.challenge
annotations: none low

Mark one memory as valid, needing review, stale, incorrect, or superseded. This never deletes memory content.

actor string reason string expected_revision number
memory.relate
annotations: none low

Create an explicit, manual relation between two local Nuzo memories.

actor string reason string
memory.relations
annotations: none low

List explicit relations for one local Nuzo memory.

limit number include_reverse boolean
memory.unrelate
annotations: none low

Remove an explicit memory relation without deleting either memory.

actor string reason string
memory.update
annotations: none low

Update a local Nuzo memory.

kind enum tags array content string confidence number expected_revision number
memory.history
annotations: none low

List audit events for one Nuzo memory ID.

limit number
memory.audit
annotations: none low

List bounded store-wide Nuzo audit events without memory content.

actor string limit number event_type array
memory.forget
annotations: none low

Archive or delete a local Nuzo memory.

mode enum reason string confirm boolean expected_revision number
memory.forget_many
annotations: none low

Preview or apply a filtered bulk archive/delete operation.

all boolean mode enum tags array reason string confirm boolean dry_run boolean
memory.export
annotations: none low

Export local Nuzo memories as a versioned JSON document and append an export audit event.

tags array limit number include_archived boolean
memory.import
annotations: none low

Import local Nuzo memories from a versioned JSON document.

memory.doctor
annotations: none low

Report the local Nuzo MCP memory environment.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: pathlib
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 58

medium
Buffer.from base64 in fabionfsc-nuzo-memory-8aed0ce/tools/capture-confirmation-binding.test.mjs:39 entropy_analyzer · 75%
low
Tool 'memory.remember' has no annotations annotation_checker · 100%
low
Tool 'memory.recall' has no annotations annotation_checker · 100%
low
Tool 'memory.recall_hook' has no annotations annotation_checker · 100%
low
Tool 'memory.suggest_capture' has no annotations annotation_checker · 100%
low
Tool 'memory.confirm_capture' has no annotations annotation_checker · 100%
low
Tool 'memory.list' has no annotations annotation_checker · 100%
low
Tool 'memory.show' has no annotations annotation_checker · 100%
low
Tool 'memory.challenge' has no annotations annotation_checker · 100%
low
Tool 'memory.relate' has no annotations annotation_checker · 100%
low
Tool 'memory.relations' has no annotations annotation_checker · 100%
low
Tool 'memory.unrelate' has no annotations annotation_checker · 100%
low
Tool 'memory.update' has no annotations annotation_checker · 100%
low
Tool 'memory.history' has no annotations annotation_checker · 100%
low
Tool 'memory.audit' has no annotations annotation_checker · 100%
low
Tool 'memory.forget' has no annotations annotation_checker · 100%
low
Tool 'memory.forget_many' has no annotations annotation_checker · 100%
low
Tool 'memory.export' has no annotations annotation_checker · 100%
low
Tool 'memory.import' has no annotations annotation_checker · 100%
low
Tool 'memory.doctor' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/transformers-provider.ts:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/transformers-provider.ts:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/transformers-provider.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/transformers-provider.ts:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/transformers-provider.ts:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/__tests__/service.test.ts:764 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in fabionfsc-nuzo-memory-8aed0ce/packages/core/src/__tests__/sqlite.test.ts:1466 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: memory.remember manifest_parser · 85%
info
Tool: memory.recall manifest_parser · 85%
info
Tool: memory.recall_hook manifest_parser · 85%
info
Tool: memory.suggest_capture manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Tool: memory.confirm_capture manifest_parser · 85%
info
Tool: memory.list manifest_parser · 85%
info
Tool: memory.show manifest_parser · 85%
info
Tool: memory.challenge manifest_parser · 85%
info
Tool: memory.relate manifest_parser · 85%
info
Tool: memory.relations manifest_parser · 85%
info
Tool: memory.unrelate manifest_parser · 85%
info
Tool: memory.update manifest_parser · 85%
info
Tool: memory.history manifest_parser · 85%
info
Tool: memory.audit manifest_parser · 85%
info
Tool: memory.forget manifest_parser · 85%
info
Tool: memory.forget_many manifest_parser · 85%
info
Tool: memory.export manifest_parser · 85%
info
Tool: memory.import manifest_parser · 85%
info
Tool: memory.doctor manifest_parser · 85%
info
Required env vars (23) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 236 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%